This vulnerability (CVE-2026-0390) in Microsoft Windows 10 Version 1607 arises from the Windows Boot Loader relying on untrusted inputs when making a security decision. This weakness can be exploited by an authorized attacker with high privileges to bypass security features locally. The CVSS 3.1 base score is 6.7, reflecting local attack vector, low attack complexity, high privileges required, no user interaction, and high impact on confidentiality, integrity, and availability. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

An authorized attacker with high privileges on the affected Windows 10 Version 1607 system can bypass a security feature locally, potentially leading to full compromise of confidentiality, integrity, and availability of the system. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Windows 10 Version 1607 as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0390 to remediate this vulnerability.